Check us the way
we ask you to check anyone.

Every Trust Passport is signed with Ed25519. The public keys are published; once you hold them, checking a public passport's signature needs no call to us. The signed bytes are set out in the specification.

The Originator’s papers: the signature, and the Black Box chain behind it recomputed from stored content, as of the reading shown on the page.

Seals and the Black Box sit on hash chains whose heads are timestamped each night by an RFC 3161 authority we do not control. The specimen seal’s portable proof carries the token; openssl checks it against the authority’s certificate.

One page, no network requests allowed by its own security policy. Drop a proof and a file into it and check a seal with APIR switched off. apir-record, MIT-licensed Python, checks an owner’s export and a public agent’s stamp on your own machine.

The radar re-verifies each public passport’s signature against the published key on every reading.

TLS 1.2 is the minimum on apir.ai and 1.3 is offered. Anyone can confirm it: openssl s_client -connect apir.ai:443.

Row-level security is switched on for every table in the database, and none is exempt. Measured 28 September 2026.

Private signing keys are generated inside the edge runtime, sealed in Supabase Vault, and never exported.

AES-256, applied by our database provider to the storage underneath.

No secret in the repository or the client bundle; the only key a browser sees is the public one it needs. The service-role key stays on the server.

Platform administration is one fixed identity, gated on the server as well as hidden in the interface. There is no role that grants it to anyone else.

TOTP two-factor is available in account settings.

The free, no-account checks are limited per caller. On since 28 September 2026.

Production deploys only from a build that passes its typecheck. Lint and tests run on every push.

APIR trains no model, on your data or anyone’s. It calls models through their providers’ APIs.

To Anthropic directly first. If that fails, through OpenRouter to another provider, with an open-weight model as the last resort. Web-grounded search and some bulk work go to Google’s Gemini API.

No agent emails, posts, signs, lodges or charges on its own. A database trigger refuses any draft marked approved or sent with no human reviewer recorded, whoever the caller.

Checking a file against the seal record, and the Numbers Check, fingerprint the file in your browser. The bytes are never sent. Watch the network tab.